Traffic Trace Info
DumpFile: 201203302100.dump
FileSize: 2386.70MB
Id: 201203302100
StartTime: Fri Mar 30 21:00:00 2012
EndTime: Fri Mar 30 21:15:00 2012
TotalTime: 900.26 seconds
TotalCapSize: 1870.31MB CapLen: 96 bytes
# of packets: 33841887 (25839.17MB)
AvgRate: 240.71Mbps stddev:47.58M
IP flow (unique src/dst pair) Information
# of flows: 2009157 (avg. 16.84 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 2.7% 1.9% 1.6% 1.6% 1.4% 1.4% 1.3% 1.3% 1.1%
IP address Information
# of IPv4 addresses: 1549312
Top 10 bandwidth usage (bytes/total in %):
21.7% 21.6% 6.5% 6.4% 3.6% 3.6% 3.3% 3.1% 2.9% 2.8%
# of IPv6 addresses: 6344
Top 10 bandwidth usage (bytes/total in %):
70.7% 70.6% 7.3% 5.2% 5.2% 3.5% 3.3% 3.3% 2.3% 2.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201203302100.pktlen.png)
detailed numbers
[ 32- 63]: 6088985
[ 64- 127]: 7932755
[ 128- 255]: 1225889
[ 256- 511]: 746745
[ 512- 1023]: 986503
[ 1024- 2047]: 16861010
Protocol Breakdown
![[protocol breakdown chart]](201203302100.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 33841887 (100.00%) 27094335323 (100.00%) 800.62
ip 33569097 ( 99.19%) 26873935559 ( 99.19%) 800.56
tcp 24576922 ( 72.62%) 23240521655 ( 85.78%) 945.62
http(s) 13021889 ( 38.48%) 18131416446 ( 66.92%) 1392.38
http(c) 5628609 ( 16.63%) 534537335 ( 1.97%) 94.97
squid 102844 ( 0.30%) 77589933 ( 0.29%) 754.44
smtp 46891 ( 0.14%) 14697143 ( 0.05%) 313.43
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 7973 ( 0.02%) 775419 ( 0.00%) 97.26
pop3 4936 ( 0.01%) 3094214 ( 0.01%) 626.87
imap 1546 ( 0.00%) 157734 ( 0.00%) 102.03
telnet 70254 ( 0.21%) 5170375 ( 0.02%) 73.60
ssh 81825 ( 0.24%) 11662383 ( 0.04%) 142.53
dns 1698 ( 0.01%) 121340 ( 0.00%) 71.46
bgp 638 ( 0.00%) 132159 ( 0.00%) 207.15
napster 61 ( 0.00%) 5282 ( 0.00%) 86.59
realaud 74 ( 0.00%) 9357 ( 0.00%) 126.45
rtsp 27066 ( 0.08%) 40330938 ( 0.15%) 1490.10
icecast 484 ( 0.00%) 120264 ( 0.00%) 248.48
hotline 54 ( 0.00%) 4235 ( 0.00%) 78.43
other 5580070 ( 16.49%) 4420696484 ( 16.32%) 792.23
udp 5451717 ( 16.11%) 2597238351 ( 9.59%) 476.41
dns 424803 ( 1.26%) 88857709 ( 0.33%) 209.17
rip 3 ( 0.00%) 196 ( 0.00%) 65.33
realaud 582 ( 0.00%) 392514 ( 0.00%) 674.42
halflif 31 ( 0.00%) 4087 ( 0.00%) 131.84
starcra 17 ( 0.00%) 3004 ( 0.00%) 176.71
everque 251 ( 0.00%) 51471 ( 0.00%) 205.06
unreal 128 ( 0.00%) 75416 ( 0.00%) 589.19
quake 20 ( 0.00%) 2033 ( 0.00%) 101.65
cuseeme 6 ( 0.00%) 678 ( 0.00%) 113.00
other 4993287 ( 14.75%) 2505540546 ( 9.25%) 501.78
icmp 2214324 ( 6.54%) 234784883 ( 0.87%) 106.03
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2036 ( 0.01%) 701096 ( 0.00%) 344.35
ip6 1301534 ( 3.85%) 795531309 ( 2.94%) 611.23
pim 306 ( 0.00%) 18360 ( 0.00%) 60.00
other 22074 ( 0.07%) 5120745 ( 0.02%) 231.98
frag 420598 ( 1.24%) 315731126 ( 1.17%) 750.67
ip6 272790 ( 0.81%) 220399764 ( 0.81%) 807.95
tcp6 190980 ( 0.56%) 203367379 ( 0.75%) 1064.86
http(s) 24070 ( 0.07%) 30801587 ( 0.11%) 1279.67
http(c) 48949 ( 0.14%) 4256646 ( 0.02%) 86.96
smtp 214 ( 0.00%) 114485 ( 0.00%) 534.98
dns 279 ( 0.00%) 61352 ( 0.00%) 219.90
bgp 94 ( 0.00%) 19013 ( 0.00%) 202.27
other 117374 ( 0.35%) 168114296 ( 0.62%) 1432.30
udp6 52842 ( 0.16%) 12840749 ( 0.05%) 243.00
dns 49496 ( 0.15%) 12110367 ( 0.04%) 244.67
realaud 1 ( 0.00%) 118 ( 0.00%) 118.00
halflif 2 ( 0.00%) 225 ( 0.00%) 112.50
quake 3 ( 0.00%) 320 ( 0.00%) 106.67
other 3340 ( 0.01%) 729719 ( 0.00%) 218.48
icmp6 28325 ( 0.08%) 3679919 ( 0.01%) 129.92
ip6 84 ( 0.00%) 11412 ( 0.00%) 135.86
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 529 ( 0.00%) 496225 ( 0.00%) 938.04
tcpdump file: 201203302100.dump.gz (772.09 MB)